Before you lodge your complaint, please take a moment to read our Data protection notice.
An asterisk (*) denotes mandatory items. Not replying to mandatory items in the form would leave us unable to properly investigate the complaint and may render your complaint inadmissible.
Please note that the EDPS will usually not investigate complaints relating to facts which the complainant learned about more than two years ago.
If you have not yet contacted the institution (the controller), we recommend that you do so before submitting your complaint. Each institution has a Data Protection Officer (DPO)
, who may be in a better position to assist you in resolving the issue. As DPOs are closer to the institutions, they may be able to help you more quickly. For the exercise of your right (of access etc.), please always contact the controller first.
9. Your Name (please note: if you are a lawyer acting on behalf of a client, please enter your client's name here, not yours - please enter your details under "contact information" below and attach a power of attorney)
please include country information
12. The EDPS treats all complaints confidentially. However, the investigation of your complaint may require disclosing your identity and the allegations you made to the institution against which you complained and, if necessary for the investigation, to the third parties involved, including national supervisory authorities where relevant. The EDPS will also copy the Data Protection Officer (DPO) of the institution concerned into all correspondence between the EDPS and the institution in question. If it turns out that your complaint falls into the competence of a data protection authority of a Member State, we will forward your complaint to them, as they are the ones who can investigate it. Any public summaries of cases (e.g. for the annual report of the EDPS) will be completely anonymous.